1 Answer
- Newest
- Most votes
- Most comments
0
At this time, CloudTrail can only support sending logs to a CloudWatch log group in the same account. This is owing to the fact that CloudTrail doesn't support AWS Organizations delegated admin feature. An alternative solution would be to use Kinesis or Lambda to automate writing those CloudWatch logs to a log group in another account.
Please look at the Centralized Logging reference architecture to see how your use case can be achieved using other services: https://aws.amazon.com/solutions/implementations/centralized-logging/
answered 2 years ago
Relevant content
- asked 8 months ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago